94acb422c07d
List Platform Actions
Shows Platform Actions associated with your account. Additional details for a specific platform action can be obtained by using the GET Platform Action endpoint.
Platform Actions are operational issues that prevent Huntress from fully monitoring or protecting your environment. They notify account administrators of configuration or health problems that require their attention. Common examples include:
- The Huntress security platform is unable to send incident reports to your PSA system and we need you to reconfigure the integration.
- Microsoft Defender has been disabled on a host and is no longer providing real-time protection.
- A Microsoft 365 integration is failing due to an authentication or consent error.
- A log source has stopped reporting events to the platform or its REST API connection is failing.
- An on-premises identity sync is mis-configured.
- A host is low on disk space, impacting EDR functionality.
Though Platform Actions are not incident reports, they do have severities (low, high, critical) associated with them that dictate an expected response time.
Query parameters
Max number of resources returned in a paged collection. Defaults to 10, with a minimum of 1 and maximum 500.
Token used to request the next page in paginated results. Defaults to 'null'
Field to sort by. Defaults to 'id'.
Sort direction. Defaults to 'desc'.
Filter by status.
Filter by severity.
Filter by subtype.
Filter by organization ID.
Response
List Platform Actions
Example response
{
"platform_actions": [
{
"id": 84938,
"account": {
"id": 1,
"name": "Your Account Name"
},
"organizations": [
{
"id": 1234,
"name": "ExampleCo"
}
],
"created_at": "2025-09-05T18:20:34Z",
"resolved_at": "2025-09-05T18:20:34Z",
"severity": "low",
"status": "resolved",
"subject": "Defender Disabled",
"type": "Environmental Issue",
"updated_at": "2025-09-05T18:20:34Z"
}
]
}